We were contacted by SMTP2GO late in the morning of the 15th. We weren’t given any more specific information about this particular issue, so we have to assume that this is a new, more proactive approach to preventing spam outbreaks. In our experience, a party that has compromised an email account they intend to use to send spam will sometimes send an initial test message from the account, and that message (if the body can be seen) can be recognised and acted on. We don’t have any easily accessible examples, but the few we have seen essentially identify the compromised account and provide the account’s password. The initiator of that message might be an automated process, or it might be a human. Regardless, if that message is seen the intent is fairly obvious, and the recipient then acts on it by using (and sometimes modifying, as we’ve noted before) the account however they intended to use it.
So I’m not very impressed that they immediately shut down our SMTP account based on one suspicious message, but I am thankful that our account with them allows us to reactivate it. So we reactivated it after disabling the one NinerNet-hosted compromised email account, and none of our clients (except the owner of the compromised account) were affected. Now that we know that we won’t overreact when or if this happens again.
It’s important to note here that we actually have the ability to communicate with SMTP2GO, who provide us the ability to communicate with intelligent, thinking humans who understand how email works and understand that providers like NinerNet do the very best that we can to prevent spam from emanating from our network, but that we are not 100% successful 100% of the time. This stands in stark contrast to providers like Outlook/Hotmail/Microsoft/whatever, Gmail, Yahoo, etc., who all act as if they own the planet and are answerable to nobody … including their own customers whom they inconvenience with their arrogant, scornful and contemptuous attitudes. You don’t actually see that yourself 99% of the time if you’re one of their users, of course — it’s all sunshine and light from their marketing departments — but it’s a painfully known fact amongst small providers like NinerNet who are shunted out of the way, downtrodden and treated like trash.
The point of this separate post (rather than a second update to the last post) is to highlight the excellent behaviour of SMTP2GO. It’s not often in this business that we send good vibes to a supplier, but SMTP2GO deserve any good vibes they get. If they provide any services that you need we couldn’t recommend them more strongly.